The Ranger authorization model is quite simple. It is maintained on the Ranger UI at Settings>Users/Groups :

A user can be either a normal user or an admin:

Only user with an Admin role can view or alter policies in Ranger.